Red Hat Security AdvisoryRHSA-2013:1752
389-ds-base security update
Released 2013-11-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) 389-ds-base-1.2.11.15-30.el6_5, 389-ds-base-devel-1.2.11.15-30.el6_5, 389-ds-base-libs-1.2.11.15-30.el6_5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) 389-ds-base-1.2.11.15-30.el6_5, 389-ds-base-devel-1.2.11.15-30.el6_5, 389-ds-base-libs-1.2.11.15-30.el6_5
- Red Hat Enterprise Linux Server (v. 6) 389-ds-base-1.2.11.15-30.el6_5, 389-ds-base-libs-1.2.11.15-30.el6_5
- Red Hat Enterprise Linux Server Optional (v. 6) 389-ds-base-1.2.11.15-30.el6_5, 389-ds-base-devel-1.2.11.15-30.el6_5
- Red Hat Enterprise Linux Workstation (v. 6) 389-ds-base-1.2.11.15-30.el6_5, 389-ds-base-libs-1.2.11.15-30.el6_5
- Red Hat Enterprise Linux Workstation Optional (v. 6) 389-ds-base-1.2.11.15-30.el6_5, 389-ds-base-devel-1.2.11.15-30.el6_5
Fixes 1 record
Priority LOW 23
389 Directory Server 1.2.11.15 (aka Red Hat Directory Server before 8.2.11-14) allows remote authenticated users to cause a denial of service (crash) via multiple @ characters in a GER attribute list in a search request.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01992 · Published 2013-11-23 · Fixed CWE-20
